WordPress iMember360 Plugin 3.8.012 - 3.9.001 - Multiple Vulnerabilities

2014-04-2800:00:00

Everett Griffiths

patchstack.com

0.003 Low

EPSS

Percentile

65.8%

JSON

WordPress iMember360 plugin is prone to multiple vulnerabilities, such as XSS, arbitrary user deletion, arbitrary code execution and disclosure of database credentials vulnerabilities.

Solution

           Upgrade the plugin.

CPENameOperatorVersion
imember360ge3.8.012
imember360le3.9.001

CPE	Name	Operator	Version
	imember360	ge	3.8.012
	imember360	le	3.9.001

References

www.exploit-db.com/exploits/33076/

0.003 Low

EPSS

Percentile

65.8%

JSON

Related for PATCHSTACK:63279DFAFBE6E22D8BFE1E6638FFE73E